In short
LDAP is the protocol used to access directory services that hold user, group and permission data, such as Active Directory.
When enterprise software integrates with LDAP/Active Directory, users sign in with company accounts, and joiners and leavers are managed in one place.
Directory groups are mapped to application roles to centralise authorisation.